Thanks for the report. Do you know how the commas are getting encoded when executing the request this way? Have you tried a POST request? TWRequest may expect you to prepare your request with %2C on the query string for commas instead.

v1.1’s OAuth is a bit stricter over all, though it should actually be pretty lenient around comma use.